Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5An issue was discovered in libjpeg 9a and 9d.Check if you run itEPSS 4.64%May 16, 2018
- Critical9.8The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable '…Check this weekEPSS 21.31%May 16, 2018
- High7.2Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%May 16, 2018
- High7.2Nagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%May 16, 2018
- High8.8Adobe Acrobat and Reader Double Free VulnerabilityPatch nowKEVEPSS 36.23%May 14, 2018
- High8.8Microsoft COM for Windows Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 73.04%May 9, 2018
- Unknownzclassic z-nomp Use of a Broken or Risky Cryptographic AlgorithmPatch nowKEVEPSS 0.69%May 9, 2018
- High7.5Microsoft Windows VBScript Engine Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 88.24%May 8, 2018
- High7.0Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 73.29%May 8, 2018
- Critical9.8Dasan GPON Routers Command Injection VulnerabilityPatch nowKEVEPSS 99.95%May 3, 2018
- Critical9.8Dasan GPON Routers Authentication Bypass VulnerabilityPatch nowKEVEPSS 92.82%May 3, 2018
- Unknownmatrix synapse Improper Input ValidationPatch nowKEVEPSS 1.49%May 1, 2018
- Unknownuetoken useless_ethereum_token Improper Input ValidationPatch nowKEVEPSS 1.54%Apr 28, 2018
- Unknownsmartmesh smartmesh Integer Overflow or WraparoundPatch nowKEVEPSS 1.76%Apr 25, 2018
- Unknownbeauty beauty_ecosystem_coin Integer Overflow or WraparoundPatch nowKEVEPSS 2.61%Apr 23, 2018
- High7.7Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install).Check if you run itEPSS 0.49%Apr 19, 2018
- Critical9.8Oracle WebLogic Server Unspecified VulnerabilityPatch nowKEVEPSS 99.96%Apr 18, 2018
- High8.8TIBCO JasperReports Server Information Disclosure VulnerabilityPatch nowKEVEPSS 48.05%Apr 17, 2018
- Medium5.9The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack.Check this weekEPSS 11.60%Apr 16, 2018
- Critical9.8VMware Tanzu Spring Data Commons Property Binder VulnerabilityPatch nowKEVEPSS 96.96%Apr 11, 2018
- Medium6.5The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functCheck if you run itEPSS 2.74%Apr 8, 2018
- Critical9.8Drupal Core Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.99%Mar 29, 2018
- Medium5.9Cisco IOS Software Denial-of-Service VulnerabilityPatch nowKEVEPSS 4.93%Mar 28, 2018
- Medium5.9Cisco IOS Software Denial-of-Service VulnerabilityPatch nowKEVEPSS 4.93%Mar 28, 2018
- High8.0Cisco IOS, XR, and XE Software Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.48%Mar 28, 2018
Sort